Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4aNPRfS97ztWIADjbYjeO-Tqdio.roa
File: 4aNPRfS97ztWIADjbYjeO-Tqdio.roa (raw, json)
Hash identifier: 9F20xm8V+jRFOJAwRurT2akbEB4eTa7g8Znkp1fCass=
Subject key identifier: E1:A3:4F:45:F4:BD:EF:3B:56:20:00:E3:6D:88:DE:3B:E4:EA:76:2A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019FCC70DD7B0F680846556286CF613B63B7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4aNPRfS97ztWIADjbYjeO-Tqdio.roa
Signing time: Tue 04 Aug 2026 11:02:56 +0000
ROA not before: Tue 04 Aug 2026 11:02:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198486
IP address blocks: 45.89.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 11:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:70:dd:7b:0f:68:08:46:55:62:86:cf:61:3b:63:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 4 11:02:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1a34f45f4bdef3b562000e36d88de3be4ea762a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:86:cc:2f:71:c3:3a:b7:f4:dc:e5:59:68:
41:8f:96:cc:31:58:ef:04:60:0c:d6:28:47:80:75:
a2:3d:f5:49:a0:a4:38:14:3e:1d:89:97:22:79:a8:
06:a8:22:b5:9d:86:3c:ca:35:78:04:0b:07:b6:08:
e8:47:e2:47:3f:1c:4f:0c:1d:69:00:c3:4a:50:22:
01:8c:a9:05:65:2b:10:06:34:93:cc:2d:47:0b:d9:
7d:e0:b3:5f:a6:31:6d:e2:dc:69:46:35:e9:58:8d:
f4:c2:20:05:7d:cf:b1:63:f0:99:40:58:9a:c2:d2:
8c:54:62:e3:da:cb:d4:ee:b6:4c:03:52:a9:9a:ce:
bc:1d:e2:ab:a5:ff:0d:b8:69:cf:78:91:85:0d:c0:
2e:5c:b2:ee:96:af:75:fb:c7:3c:07:8a:9f:1e:b7:
a4:a4:9e:80:84:e1:9e:17:3f:ee:09:e3:3c:fc:98:
c1:9e:53:69:4f:bd:89:fa:1c:c9:af:03:e0:84:d5:
1b:6d:8a:04:0c:a3:b7:a4:e9:c1:90:8e:81:fa:39:
52:17:df:16:f9:97:72:cc:86:b0:5a:1f:ce:ef:0f:
d1:32:d2:38:88:9f:55:4b:82:a5:74:54:2c:34:f5:
1f:1c:4c:52:73:44:39:ed:78:3b:22:f7:5a:b7:bf:
08:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A3:4F:45:F4:BD:EF:3B:56:20:00:E3:6D:88:DE:3B:E4:EA:76:2A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4aNPRfS97ztWIADjbYjeO-Tqdio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.244.0/24
Signature Algorithm: sha256WithRSAEncryption
56:d2:4f:f8:e9:d2:0f:a0:59:32:59:8a:89:25:12:35:d6:39:
f4:cd:4b:cb:c1:04:cf:ad:94:88:90:09:5a:ee:79:cc:72:a7:
f3:97:73:b5:4e:30:34:72:7a:ab:c2:00:59:56:42:20:f9:c7:
3a:dd:17:b6:83:ee:72:95:53:21:b7:1b:eb:d2:56:2a:f7:ad:
7f:c9:f6:4e:6f:18:00:33:48:21:67:f5:de:99:83:b4:57:3c:
f1:74:60:a4:ca:16:5c:9f:5c:6e:d8:12:e3:9c:a2:b2:3f:d4:
d9:71:ed:b2:60:80:97:fc:56:23:67:bc:bb:6d:8f:0f:56:99:
1c:92:ea:d4:fb:2b:b1:e8:6b:13:e9:b6:1f:80:ba:c4:bc:14:
86:b6:12:eb:20:aa:12:fe:a5:44:ec:7e:3d:9c:a0:ff:72:a4:
ff:e5:ab:f8:43:cb:b0:09:39:c8:74:af:6f:90:8c:28:86:b7:
e1:de:8f:d4:3a:c8:18:18:ff:0f:38:d0:21:e6:75:0e:b8:7e:
19:bf:fb:21:92:8a:d2:54:a1:01:9f:7d:bc:69:66:fa:20:ba:
d2:64:11:52:e2:4b:46:cb:3c:07:e5:fb:ae:0d:17:ed:46:12:
b3:11:46:c3:d4:7b:91:8d:e9:14:67:03:2d:4f:83:c4:40:e5:
27:16:38:75
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/McN17D2gIRlVihs9hO2O3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwODA0MTEwMjU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWEzNGY0NWY0YmRlZjNiNTYyMDAwZTM2ZDg4ZGUzYmU0ZWE3NjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUCGzC9xwzq39NzlWWhBj5bMMVjv
BGAM1ihHgHWiPfVJoKQ4FD4diZcieagGqCK1nYY8yjV4BAsHtgjoR+JHPxxPDB1p
AMNKUCIBjKkFZSsQBjSTzC1HC9l94LNfpjFt4txpRjXpWI30wiAFfc+xY/CZQFia
wtKMVGLj2svU7rZMA1Kpms68HeKrpf8NuGnPeJGFDcAuXLLulq91+8c8B4qfHrek
pJ6AhOGeFz/uCeM8/JjBnlNpT72J+hzJrwPghNUbbYoEDKO3pOnBkI6B+jlSF98W
+ZdyzIawWh/O7w/RMtI4iJ9VS4KldFQsNPUfHExSc0Q57Xg7Ivdat78IyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOGjT0X0ve87ViAA422I3jvk6nYqMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvNGFOUFJmUzk3enRXSUFEamJZamVPLVRxZGlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVn0MA0G
CSqGSIb3DQEBCwUAA4IBAQBW0k/46dIPoFkyWYqJJRI11jn0zUvLwQTPrZSIkAla
7nnMcqfzl3O1TjA0cnqrwgBZVkIg+cc63Re2g+5ylVMhtxvr0lYq961/yfZObxgA
M0ghZ/XemYO0VzzxdGCkyhZcn1xu2BLjnKKyP9TZce2yYICX/FYjZ7y7bY8PVpkc
kurU+yux6GsT6bYfgLrEvBSGthLrIKoS/qVE7H49nKD/cqT/5av4Q8uwCTnIdK9v
kIwohrfh3o/UOsgYGP8PONAh5nUOuH4Zv/shkorSVKEBn328aWb6ILrSZBFS4ktG
yzwH5fuuDRftRhKzEUbD1HuRjekUZwMtT4PEQOUnFjh1
-----END CERTIFICATE-----
Generated at Tue Aug 4 19:10:48 2026 by rpki-client